Management Software. User s Guide AT-S84. For the AT-9000/24 Layer 2 Gigabit Ethernet Switch. Version Rev. B

Transcription

1 Management Software AT-S84 User s Guide For the AT-9000/24 Layer 2 Gigabit Ethernet Switch Version Rev. B

2 Copyright 2006 Allied Telesyn, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesyn, Inc. Microsoft and Internet Explorer are registered trademarks of Microsoft Corporation. Netscape Navigator is a registered trademark of Netscape Communications Corporation. All other product names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners. Allied Telesyn, Inc. reserves the right to make changes in specifications and other information contained in this document without prior written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesyn, Inc. be liable for any incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or related to this manual or the information contained herein, even if Allied Telesyn, Inc. has been advised of, known, or should have known, the possibility of such damages.

3 Contents Preface Where to Find Web-based Guides Contacting Allied Telesyn Online Support and Telephone Support Returning Products Sales or Corporate Information Management Software Updates Chapter 1: Overview Management Overview Local Connection Remote Connection Using an SNMP Network Management Application Management Access Level Section I: Using the Menus Interface Chapter 2: Getting Started with the Menus Interface Starting a Local Management Session Using the Menus Interface Quitting from a Local Management Session Chapter 3: Basic Switch Parameters Configuring the IP Address, Subnet Mask, and Gateway Address Enabling and Disabling the DHCP Client Configuring System Administration Information Setting the User Interface Configuration Disabling or Enabling the Web Server Disabling or Enabling the Telnet Server Configuring SNTP Viewing Switch Information Rebooting the Switch Pinging a Remote System Viewing the System Log Returning the AT-S84 Management Software to the Factory Default Values Chapter 4: SNMP SNMP Overview Default SNMP Community Strings Enabling or Disabling the SNMP Agent Enabling Authentication Traps Changing the Default SNMP Community Names Working with Trap Receivers Adding a Trap Receiver Enabling or Disabling Trap Receivers

4 Contents Modifying a Trap Receiver...66 Deleting a Trap Receiver...67 Chapter 5: Port Configuration...69 Displaying the Port Parameters...70 Enabling or Disabling a Port...72 Setting a Port s Speed and Duplex Mode...73 Changing the Flow Control Setting...75 Changing the Back Pressure Setting...76 Displaying Port Statistics...77 Chapter 6: Port Trunking...81 Port Trunking Overview...82 Static Port Trunk Overview...82 Port Trunking Guidelines...83 LACP Trunks...84 LACP Trunk Status...84 LACP Port Priority Parameter...85 LACP Trunk Guidelines...86 Setting Up a Port Trunk...88 Creating a Port Trunk...88 Modifying a Port Trunk...90 Enabling or Disabling a Port Trunk...91 Setting Up an LACP Trunk...92 Creating an LACP Trunk...92 Configuring the LACP Port Priority...93 Verifying the LACP Group Settings...94 Disabling an LACP Trunk...95 Chapter 7: Port Mirroring...97 Port Mirroring Overview...98 Configuring Port Mirroring...99 Enabling or Disabling Port Mirroring Chapter 8: Virtual LANs and GVRP VLAN Features Increased Performance Improved Manageability Increased Security VLAN Overview VLAN Name VLAN Identifier Port VLAN Identifier VLAN Port Members Tagged Port Members Untagged Port Members Incoming and Outgoing Tagged and Untagged Frames Incoming Frames Outgoing Frames Guidelines for Creating a VLAN Untagged VLAN Tagged VLAN Example Working with VLANS Creating a VLAN Configuring the Port PVID Displaying the VLANs Modifying a VLAN

5 AT-S84 Management Software User s Guide Changing the VLAN Name Adding or Removing a Tagged Port in a VLAN Deleting a VLAN Resetting to the Default VLAN GVRP GVRP Overview Guidelines Enabling or Disabling GVRP Chapter 9: Quality of Service (QoS) QoS Overview Mapping CoS Priorities to Egress Queues Configuring CoS Chapter 10: IGMP Snooping IGMP Snooping Overview Configuring IGMP Viewing the Multicast Groups Chapter 11: Rapid Spanning Tree Protocol (RSTP) RSTP Overview Bridge Priority and the Root Bridge Designated Bridge and Designated Port Path Costs and Port Costs Port Priority Hello Time and Bridge Protocol Data Units (BPDUs) Point-to-Point and Edge Ports Mixed STP and RSTP Networks Rapid Spanning Tree and VLANs Enabling or Disabling RSTP Configuring the RSTP Bridge Settings Configuring STP Compatibility Configuring RSTP Port Settings Configuring the Basic RSTP Port Settings Configuring the Advanced RSTP Port Settings Displaying the RSTP Topology Chapter 12: 802.1x Network Access Control x Network Access Control Overview Authentication Process Authenticator Ports General Steps Network Access Control Guidelines Configuring 802.1x Network Access Control Chapter 13: RADIUS Authentication Protocol RADIUS Overview RADIUS Implementation Guidelines Configuring the RADIUS Server Displaying the RADIUS Server Settings Chapter 14: Broadcast Storm Control Broadcast Storm Control Overview Configuring Broadcast Storm Control Chapter 15: Working With System Files Downloading a New Management Software Image Using TFTP Uploading or Downloading a Configuration File

6 Contents Uploading the Configuration File Downloading a Configuration File Section II: Using the Web Browser Interface Chapter 16: Starting a Web Browser Management Session Establishing a Remote Connection to Use the Web Browser Interface Web Browser Tools Quitting a Web Browser Management Session Chapter 17: Basic Switch Parameters Configuring an IP Address, Subnet Mask and Gateway Address Enabling and Disabling the DHCP Client Configuring System Administration Information Setting the User Interface Configuration Enabling or Disabling the Web Server Enabling or Disabling the Telnet Server Configuring SNTP Viewing System Information Rebooting a Switch Pinging a Remote System Viewing the System Log Returning the AT-S84 Management Software to the Factory Default Values Chapter 18: Port Configuration Viewing and Configuring Multiple Ports Viewing and Configuring a Single Port Displaying Port Statistics Chapter 19: SNMP Enabling or Disabling the SNMP Agent Changing the Default SNMP Community Names Working with Trap Receivers Adding and Enabling a Trap Receiver Disabling a Trap Receiver Deleting a Trap Receiver Chapter 20: Port Trunking Setting Up a Port Trunk Creating a Port Trunk Enabling or Disabling a Port Trunk Setting Up an LACP Trunk Creating an LACP Trunk Configuring the LACP Port Priority Verifying the LACP Group Settings Disabling an LACP Trunk Chapter 21: Port Mirroring Configuring Port Mirroring Disabling Port Mirroring Chapter 22: Virtual LANs Creating a VLAN Configuring the PVID of Untagged Ports Displaying the VLANs Modifying a VLAN Deleting a VLAN

7 AT-S84 Management Software User s Guide Deleting All VLANs Enabling or Disabling GVRP Chapter 23: Quality of Service (QoS) Mapping CoS Priorities to Egress Queues Configuring CoS Chapter 24: IGMP Configuring IGMP Viewing the Multicast Group Members Chapter 25: RSTP Basic RSTP Configuration Configuring RSTP Port Settings Configuring the Basic RSTP Port Settings Configuring the Advanced RSTP Port Settings Viewing the RSTP Topology Chapter 26: 802.1x Network Access Control Configuring 802.1x Network Access Control Chapter 27: RADIUS Authentication Protocol Configuring the RADIUS Client Chapter 28: Broadcast Storm Control Configuring Broadcast Storm Control Chapter 29: Working with System Files Downloading a New Management Software Image Using TFTP Uploading or Downloading a Configuration File Section III: Using the Command Line Interface Chapter 30: Getting Started with the Command Line Interface CLI Command Modes Introduction Command Formatting Conventions User EXEC Command Mode Privileged EXEC Command Mode Global Configuration Command Mode Interface Configuration Command Mode Port Mirroring Example VLAN Configuration Command Mode VLAN Example Starting the Command Line Interface Command Formatting Command Line Interface Features Command Line Syntax Conventions Appendix A: AT-S84 Default Settings Basic Switch Default Settings System Reboot Default Settings User Interface Configuration Default Settings Management Interface Default Settings Ping Default Settings System IP Configuration Default Settings System Administration Configuration Default Settings SNMP Default Settings Port Configuration Default Settings

8 Contents Quality of Service IGMP Snooping Default Settings RSTP Default Settings x Network Access Control Default Settings RADIUS Server Default Settings Broadcast Storm Control Default Settings Index

9 Figures Figure 1. Connecting the Management Cable to the Console Port...26 Figure 2. Login Menu...27 Figure 3. Main Menu...27 Figure 4. Basic Switch Configuration Menu...32 Figure 5. System IP Configuration Menu...33 Figure 6. System Admin. Configuration Menu...36 Figure 7. User Interface Configuration Menu...38 Figure 8. SNTP Configuration Menu...44 Figure 9. Time Zone Configuration Menu...45 Figure 10. General Information Menu...47 Figure 11. Switch Tools Configuration Menu...50 Figure 12. System Reboot Menu...51 Figure 13. Ping Execution Menu...52 Figure 14. Ping Results...54 Figure 15. System Log Menu...55 Figure 16. SNMP Configuration Menu...63 Figure 17. Port Configuration Menu...70 Figure 18. Statistics Menu...77 Figure 19. Static Port Trunk Example...82 Figure 20. LACP Trunk Example...84 Figure 21. Advanced Switch Configuration Menu...88 Figure 22. Trunk Configuration Menu...89 Figure 23. LACP Port Priority Menu...93 Figure 24. LACP Group Status Menu...95 Figure 25. Port Mirroring Menu...99 Figure 26. Untagged VLAN Figure 27. Tagged VLAN Figure 28. VLAN Management Menu Figure 29. VLAN Creation Menu Figure 30. Config VLAN Member Menu Figure 31. GVRP Example Figure 32. Quality of Service Configuration Menu Figure 33. Traffic Class Configuration Menu Figure 34. Port Priority Configuration Menu Figure 35. IGMP Configuration Menu Figure 36. MAC Address DIsplayed on IGMP Configuration Menu Figure 37. View Group Members Menu Figure 38. Point-to-Point Ports Figure 39. Edge Port Figure 40. Point-to-Point and Edge Port Figure 41. VLAN Fragmentation Figure 42. RSTP Configuration Menu Figure 43. RSTP Basic Port Configuration Menu Figure 44. RSTP Advanced Port Configuration Menu Figure 45. Topology Information Menu Figure 46. Example of the Authenticator Role Figure 47. Authentication Across Multiple Switches Figure 48. Port Based Access Control Configuration Menu Figure 49. RADIUS Server Configuration Menu Figure 50. Storm Control Configuration Menu

10 Figures Figure 51. Software Upgrade Menu (1 of 2) Figure 52. Software Upgrade Menu (2 of 2) Figure 53. Configuration File Upload/Download Menu Figure 54. TFTP Configuration File Upload/Download Menu Figure 55. Entering a Switch s IP Address in the URL Field Figure 56. AT-S84 Login Dialog Box Figure 57. Home Page for the AT-9000/24 Gigabit Ethernet Switch Figure 58. IP Configuration Page Figure 59. Administration Configuration Page Figure 60. User Interface Page Figure 61. SNTP Configuration Page Figure 62. Switch Information Page Figure 63. System Reboot Configuration Page Figure 64. Ping Test Configuration Page Figure 65. Ping Test Results Page Figure 66. System Log Page Figure 67. Port Configuration Page Figure 68. Configuration of Port Page Figure 69. Statistics Page Figure 70. SNMP Configuration Page Figure 71. Trunk Configuration Page Figure 72. LACP Port Priority Page Figure 73. LACP Group Status Page Figure 74. Port Mirroring Page Figure 75. Create VLAN Page Figure 76. PVID Page Figure 77. VLAN Configuration - Members Page Figure 78. VLAN Information Page Figure 79. Modify VLAN Page Figure 80. Traffic Class Configuration Page Figure 81. Port Priority Configuration Page Figure 82. IGMP Snooping Page Figure 83. IGMP Snooping - Group Members Page Figure 84. Rapid Spanning Tree Configuration Page Figure 85. RSTP Basic Port Configuration Page Figure 86. RSTP Advanced Port Configuration Page Figure 87. Designated Topology Information Page Figure x Configuration Page Figure 89. RADIUS Configuration Page Figure 90. Broadcast Storm Control Page Figure 91. Image Upgrade Page Figure 92. Configuration File Upload/Download Page Figure 93. Main Menu Figure 94. Command Line Prompt, User Executive Mode

11 Tables Table 1. Menus Interface Operations...28 Table 2. Default Mappings of IEEE 802.1p Priority Levels to Egress Port Priority Queues Table 3. RSTP Auto-Detect Port Costs Table 4. RSTP Auto-Detect Port Trunk Costs Table 5. Port Priority Value Increments Table 6. RSTP Point-to-Point Status Table 7. RSTP Point-to-Point Status Table 8. Command Modes Table 9. User EXEC Command Mode Commands Table 10. Privileged EXEC Command Mode Commands Table 11. Global Configuration Command Mode Commands Table 12. Interface Configuration Command Mode Commands Table 13. VLAN Configuration Command Mode Commands Table 14. Command Line Syntax Conventions

12 Tables 12

13 Preface This guide contains instructions on how to use the AT-S84 management software to manage and monitor the AT-9000/24 Gigabit Ethernet switch. The AT-S84 management software has three management interfaces: menus, web browser, and CLI. You access the menus and CLI interfaces through the console port on the switch or through Telnet, and the web browser interface from any management workstation on your network that has a web browser application. For background information on the management interfaces, refer to Chapter 1, Overview on page 17. This preface contains the following sections: Where to Find Web-based Guides on page 14 Contacting Allied Telesyn on page 15 13

14 Preface Where to Find Web-based Guides The installation and user guides for all Allied Telesyn products are available in portable document format (PDF) on our web site at You can view the documents online or download them onto a local workstation or server. 14

15 AT-S84 Management Software User s Guide Contacting Allied Telesyn This section provides Allied Telesyn contact information for technical support as well as sales and corporate information. Online Support and Telephone Support Returning Products You can request technical support online by accessing the Allied Telesyn Knowledge Base: You can use the Knowledge Base to submit questions to our technical support staff and review answers to previously asked questions. For Technical Support via or telephone, refer to the Support & Services section of the Allied Telesyn web site: Products for return or repair must first be assigned a return materials authorization (RMA) number. A product sent to Allied Telesyn without an RMA number will be returned to the sender at the sender s expense. To obtain an RMA number, contact Allied Telesyn Technical Support through our web site: Sales or Corporate Information Management Software Updates You can contact Allied Telesyn for sales or corporate information through our web site: To find the contact information for your country, select Contact Us -> Worldwide Contacts. New releases of management software for our managed products are available from either of the following Internet sites: Allied Telesyn web site: Allied Telesyn FTP server: ftp://ftp.alliedtelesyn.com To download new software from the Allied Telesyn FTP server from your workstation s command prompt, you must have FTP client software. Additionally, you must log in to the server. The user name is anonymous and your address is the password. 15

16 Preface 16

17 Chapter 1 Overview This chapter provides an overview of the AT-S84 management software for the AT-9000/24 Gigabit Ethernet switch. This chapter describes the different methods for accessing the software and the management access levels. This chapter contains the following sections: Management Overview on page 18 Local Connection on page 19 Remote Connection on page 20 Management Access Level on page 21 17

18 Chapter 1: Overview Management Overview The AT-S84 management software allows you to view and adjust the operating parameters of the AT-9000/24 Gigabit Ethernet switch. Here are a few examples of the functions that you can perform with the management software: Enable and disable ports Configure a port s speed and duplex mode Create port trunks Configure a port mirror Configure Quality of Service (QoS) Create and tagged virtual LANs Configure 802.1x network access control The AT-S84 management software is preinstalled on the switch with default settings for all of the switch s operating parameters. You do not have to manage the switch if the default settings are adequate for your network. Instead, you can use the device as an unmanaged switch by connecting it to your network, as explained in the hardware installation guide, and powering on the unit. Note The default settings for the management software are listed in Appendix A, AT-S84 Default Settings on page 319. To actively manage the switch and adjust its operating parameters, you must connect to an AT-9000/24 Gigabit Ethernet switch and access the switch s AT-S84 management software. There are two ways to connect to the switch: Locally Remotely Depending upon the method you choose, specific AT-S84 management software interfaces are available. When you have a local connection, you can use the menus (described in Section I of this guide) or the command line interface (CLI) (described in Section III). With a remote connection you can use the menus, CLI, and web browser interfaces, or a third-party network management application. (The web browser interface is described in Section II). The following sections in this chapter briefly describe each type of management session. 18

19 AT-S81 Management Software User s Guide Local Connection To establish a local connection with a switch, you connect a terminal or a PC with a terminal emulator program to the terminal port on the front of the switch using the management cable included with the unit. This type of connection is referred to as local because you must be physically close to the switch, such as in the wiring closet where the switch is located. Note For instructions on how to start a local management session, refer to Starting a Local Management Session on page 26. With a local connection, you can manage the switch using the menus or CLI. A switch does not need an Internet Protocol (IP) address for you to manage it locally. You can start a local management session on a switch at any time. It does not interfere with the forwarding of network packets by the device. 19

20 Chapter 1: Overview Remote Connection You can use any management station on your network that has the Telnet application, an SNMP manager, or as web browser to manage an AT-9000/24 Gigabit Ethernet switch. These are referred to as remote connections. In order for you to manage a switch using a remote connection, the switch must have an IP address and subnet mask. To manually assign an IP address, refer to Configuring the IP Address, Subnet Mask, and Gateway Address on page 32. To configure the switch to obtain its IP configuration from a DHCP server, refer to Enabling and Disabling the DHCP Client on page 35. The initial assignment of an IP address must be made through a local management session. For instructions on how to start a remote management session to use the web browser interface, refer to Establishing a Remote Connection to Use the Web Browser Interface on page 200. Using an SNMP Network Management Application You can use the Simple Network Management Protocol (SNMP) to run a network management application such as AT-View to manage the switch through a remote connection. A familiarity with how to use management information base (MIB) objects is necessary for this type of management. The AT-S84 management software supports the following MIBs: SNMP MIB-II (RFC 1213) Bridge MIB (RFC 1493) Remote Network MIB (RFC 1757) Allied Telesyn managed switch MIB You must download the Allied Telesyn managed switch MIB (atiswitch.mib) file from the Allied Telesyn web site and compile the files with your SNMP application. For compilation instructions, refer to your third-party application s documentation. Refer to Chapter 4, SNMP on page 59 for information about how to configure SNMP on the switch. 20

21 AT-S81 Management Software User s Guide Management Access Level The AT-S84 management software has one level of management access: manager. When you log in as a manager, you can view and configure all of a switch s operating parameters. You log in as a manager by entering the appropriate username and password when you start an AT-S84 management session. The default username and password are both manager. 21

22 Chapter 1: Overview 22

23 Section I Using the Menus Interface The chapters in this section explain how to manage the switch using the menus interface of the AT-S84 management software. The chapters include: Chapter 2, Getting Started with the Menus Interface on page 25 Chapter 3, Basic Switch Parameters on page 31 Chapter 5, Port Configuration on page 69 Chapter 4, SNMP on page 59 Chapter 6, Port Trunking on page 81 Chapter 7, Port Mirroring on page 97 Chapter 8, Power Over Ethernet on page 81 Chapter 8, Virtual LANs and GVRP on page 103 Chapter 9, Quality of Service (QoS) on page 125 Chapter 10, IGMP Snooping on page 137 Chapter 11, Rapid Spanning Tree Protocol (RSTP) on page 145 Chapter 12, 802.1x Network Access Control on page 167 Chapter 13, RADIUS Authentication Protocol on page 179 Chapter 14, Broadcast Storm Control on page 185 Chapter 15, Working With System Files on page 189 Note The web browser interface is described in Section II, Using the Web Browser Interface on page 197, and the command line interface is described in Section III, Using the Command Line Interface on page 303. Section I: Using the Menus Interface 23

24 24 Section I: Using the Menus Interface

25 Chapter 2 Getting Started with the Menus Interface This chapter provides information and instructions on how to access the menus interface of the AT-S84 management software by starting a local management session. This chapter contains the following sections: Starting a Local Management Session on page 26 Using the Menus Interface on page 28 Quitting from a Local Management Session on page 29 Section I: Using the Menus Interface 25

26 Chapter 2: Getting Started with the Menus Interface Starting a Local Management Session You establish a local management session with the AT-9000/24 Gigabit Ethernet switch by connecting a terminal or personal computer with a terminal emulation program to the RS-232 console port on the front panel of the switch. Note You do not need to assign an IP address to the switch to manage the unit from a local management session. To start a local management session, perform the following procedure: 1. Connect one end of the management cable included with the switch to the console port on the AT-9000/24 Gigabit Ethernet switch, as shown in Figure Figure 1. Connecting the Management Cable to the Console Port 2. Connect the other end of the cable to the RS-232 port on a terminal or PC with a terminal emulator program. 3. Configure the terminal or terminal emulator program as follows: Baud per second: 9600 Data bits: 8 Stop bits: 1 Flow control: None Note These settings are for a DEC VT100 or ANSI terminal, or an equivalent terminal emulation program. You cannot change this. 26 Section I: Using the Menus Interface

27 AT-S84 Management Software User s Guide The Login Menu is shown in Figure 2. ============================================================== AT-9000/24 Management System Local - Console Allied Telesyn International Corp. Copyright 2006 ============================================================== Login Menu Login: Figure 2. Login Menu 4. Enter the manager login name and press Return. The default name is manager. You are prompted for a password. 5. Enter the manager password. The default password is friend. Note To change the login name or password, refer to Setting the User Interface Configuration on page 38. The Main Menu is shown in Figure 3. AT-9000/24 Local Management System Enter the character in square brackets to select option Main Menu [G]eneral Information [B]asic Switch Configuration [A]dvanced Switch Configuration Switch [T]ools [S]tatistics [C]ommand Line Interface [Q]uit Command> Figure 3. Main Menu Section I: Using the Menus Interface 27

28 Chapter 2: Getting Started with the Menus Interface Using the Menus Interface If you are using a DEC VT00 or ANSI (the default) terminal configuration, refer to Table 1 for instructions on how to move through the menus and select menu options. Table 1. Menus Interface Operations When directed to Make a menu selection Enter information (for example, entering a port number) Return to previous menu You must Type the menu option letter enclosed in brackets, such as typing P to select [P]ort Configuration. Type the information and press Enter. Type Q for Quit to previous menu. When you enter a letter to select a field in which you can enter a value, a message is displayed. For example: Enter new password> The > symbol indicates that you can enter a new value for the parameter or change the existing value. After you have entered a value, press Enter. Changes are immediately activated on the AT-9000/24 Gigabit Ethernet switch. Note The web browser interface is described in Section II, Using the Web Browser Interface on page 197, and the command line interface is described in Section III, Using the Command Line Interface on page Section I: Using the Menus Interface

29 AT-S84 Management Software User s Guide Quitting from a Local Management Session To quit a local management session, return to the Main Menu and type Q for Quit. When you are finished managing the switch, make sure to exit from a management session. Quitting from a local session prevents unauthorized changes to the switch s configuration if you leave your workstation unattended. Note A local management session automatically times out if there is no management activity during a pre-defined length of time referred to as the timeout period. The timeout feature is intended to protect the parameter settings on the switch from unauthorized changes should you leave your management station unattended during a management session. The default timeout value is 10 minutes. To change the timeout default value, refer to Setting the User Interface Configuration on page 38. Section I: Using the Menus Interface 29

30 Chapter 2: Getting Started with the Menus Interface 30 Section I: Using the Menus Interface

31 Chapter 3 Basic Switch Parameters This chapter contains the following sections: Configuring the IP Address, Subnet Mask, and Gateway Address on page 32 Enabling and Disabling the DHCP Client on page 35 Configuring System Administration Information on page 36 Setting the User Interface Configuration on page 38 Disabling or Enabling the Web Server on page 42 Disabling or Enabling the Telnet Server on page 43 Configuring SNTP on page 44 Viewing Switch Information on page 47 Rebooting the Switch on page 50 Pinging a Remote System on page 52 Returning the AT-S84 Management Software to the Factory Default Values on page 57 Section I: Using the Menus Interface 31

32 Chapter 3: Basic Switch Parameters Configuring the IP Address, Subnet Mask, and Gateway Address This procedure explains how to manually assign an IP address, subnet mask, and gateway address to the switch. Before performing the procedure, note the following: An IP address and subnet mask are not required for normal network operations of the switch. Values for these parameters are only required if you want to remotely manage the device with a web browser. A gateway address is only required if you want to remotely manage the device from a remote management station that is separated from the switch by a router. To configure the switch to automatically obtain its IP configuration from a DHCP server on your network, go to Enabling and Disabling the DHCP Client on page 35. To set the switch s IP configuration, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4. AT-9000/24 Local Management System Main Menu -> Basic Switch Configuration Menu System [A]dministration Configuration System [I]P Configuration S[N]MP Configuration [P]ort Configuration [U]ser Interface Configuration Rapid [S]panning Tree Configuration Storm [C]ontrol Configuration SN[T]P Configuration [Q]uit to previous menu Command> Figure 4. Basic Switch Configuration Menu 32 Section I: Using the Menus Interface

33 AT-S84 Management Software User s Guide 2. From the Basic Switch Configuration Menu, type I to select System IP Configuration. The System IP Configuration Menu is shown in Figure 5. AT-9000/24 Local Management System Basic Switch Configuration -> System IP Configuration Menu MAC Address: 00:06:5H:B2:65:84 IP Address: Subnet Mask: Gateway: DHCP Mode: Disabled <COMMAND> Set [I]P Address Set Subnet [M]ask Set Default [G]ateway Enable/Disable [D]HCP Mode [Q]uit to previous menu Command> Figure 5. System IP Configuration Menu The top portion of the menu displays the current IP address, subnet mask, and gateway address for the switch. The menu also displays the switch s MAC address. The MAC address cannot be changed. The menu also displays the current status of the DHCP client on the switch. The Enable/Disable DHCP Mode option is described in Enabling and Disabling the DHCP Client on page To set the switch s IP address, do the following: a. Type I to select Set IP Address. The following prompt is displayed: Enter new IP address> b. Type the IP address for the switch and press Enter. 4. To set the switch s subnet mask, do the following: a. Type M to select Set Subnet Mask. The following prompt is displayed: Enter new subnet mask> Section I: Using the Menus Interface 33

34 Chapter 3: Basic Switch Parameters b. Type the subnet mask for the switch and press Enter. 5. To set the switch s gateway address, do the following: a. Type G to select Set Default Gateway. The following prompt is displayed: Enter new gateway IP address> b. Type the gateway IP address for the switch and press Enter. 34 Section I: Using the Menus Interface

35 AT-S84 Management Software User s Guide Enabling and Disabling the DHCP Client This procedure explains how to activate and deactivate the DHCP client on the switch. When the client is activated, the switch obtains its IP configuration, such as its IP address and subnet mask, from a DHCP server on your network. Before performing the procedure, note the following: An IP address and subnet mask are not required for normal network operations of the switch. Values for these parameters are only required if you want to remotely manage the device with a web browser. The DHCP client is disabled by default on the switch. The DHCP client does not support BOOTP servers. To activate or deactivate the DHCP client on the switch, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page From the Basic Switch Configuration Menu, type I to select System IP Configuration. The System IP Configuration Menu is shown in Figure 5 on page Type D to select Enable/Disable DHCP Mode. The following prompt is displayed: Enable or Disable DHCP mode (E/D)> 4. Type E to select Enable or D to select Disable. If you enable the client, it immediately begins to send queries to the DHCP server. It continues to send queries until it receives a response. Section I: Using the Menus Interface 35

36 Chapter 3: Basic Switch Parameters Configuring System Administration Information This section explains how to assign a name to the switch, as well as specify the location of the switch and the name of the switch s administrator. Entering this information is optional. To set a switch s administration information, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page From the Basic Switch Configuration Menu, type A to select System Administration Information. The System Administration Configuration Menu is shown in Figure 6. AT-9000/24 Local Management System Basic Switch Configuration -> System Admin. Configuration Menu Description: AT-9000/24 ObjectID: Name: Location: Contact: <COMMAND> Set System [N]ame Set System [L]ocation Set System [C]ontact Information [Q]uit to previous menu Command> Figure 6. System Admin. Configuration Menu The Description parameter in the top portion of the menu displays the model name of the switch. The System Object ID parameter is the numeric ID of the switch. You cannot change these parameters. 3. To set the system s name, do the following: a. Type N to select Set System Name. The following prompt is displayed: 36 Section I: Using the Menus Interface

37 AT-S84 Management Software User s Guide Enter system name> b. Type a name for the switch (for example, Sales). The name is optional and can contain up to 50 characters. Note Allied Telesyn recommends that you assign names to the switches. Names can help you identify the switches when you manage them and can also help you avoid performing a configuration procedure on the wrong switch. 4. To enter the system s location, do the following: a. Type L to select Set System Location. The following prompt is displayed: Enter system location> b. Type information to describe the location of the switch (for instance, Third Floor). The location is optional and can contain up to 50 characters. 5. To enter the administrator s name, do the following: a. Type C to select Set System Contact Information. The following prompt is displayed: Enter system contact> b. Type the name of the network administrator responsible for managing the switch. The contact name is optional and can contain up to 50 characters. Section I: Using the Menus Interface 37

38 Chapter 3: Basic Switch Parameters Setting the User Interface Configuration This procedure explains how to adjust the user interface and security features on the switch. With this procedure you can change various settings that control user access to the switch. To set the switch s user interface configuration, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page From the Basic Switch Configuration Menu, type U to select User Interface Configuration. The User Interface Configuration Menu is shown in Figure 7. AT-9000/24 Local Management System Basic Switch Configuration -> User Interface Configuration Menu Console UI Idle Timeout: Telnet UI Idle Timeout: 5 Min. 5 min. Telnet Server: SNMP Agent: Web Server: User Name: Enabled Enabled Enabled manager <COMMAND> Set [C]onsole UI Time Out Enable/Disable Te[l]net Server Set [T]elnet UI Time Out Enable/Disable [S]NMP Agent Change Administrator User [N]ame Enable/Disable [W]eb Server Change Administrator [P]assword [Q]uit to previous menu [R]ADIUS Server Configuration Command> Figure 7. User Interface Configuration Menu The Telnet server option is described in Disabling or Enabling the Telnet Server on page 43. The web server option is described in Disabling or Enabling the Web Server on page Section I: Using the Menus Interface

39 AT-S84 Management Software User s Guide The SNMP option is described in Enabling or Disabling the SNMP Agent on page 62. The RADIUS Server Configuration option is described Chapter 13, RADIUS Authentication Protocol on page To configure the console UI idle time out parameter, do the following: a. Type C to select Set Console UI Time Out. The following prompt is displayed: Enter console idle timeout> b. Enter a number for the timeout value. The range is 0 to 60 minutes, and the default is 5 minutes. A timeout value to 0 causes the switch to never time out a local management session. The console UI idle time out parameter specifies the length of time a local management session can be inactive before the management software automatically ends it. This feature prevents unauthorized individuals from configuring the switch if you leave your management workstation unattended. This parameter applies to a local management session but not to a remote SNMP or web management session. An SNMP management session remains active as long as the network management application is active. A web browser management session remains active as long as your web browser is open. Note If you select 0, you must always remember to properly log off from a local management session when you are finished to prevent blocking future management sessions with the switch. 4. To configure the Telnet UI idle time out parameter, do the following: a. Type T to select Set Telnet UI Time Out. The following prompt is displayed: Enter console idle timeout> b. Enter a number for the timeout value. The range is 0 to 60 minutes, and the default is 5 minutes. A timeout value to 0 causes the switch to never timeout a local management session. Section I: Using the Menus Interface 39

40 Chapter 3: Basic Switch Parameters The Telnet UI idle time out parameter specifies the length of time a remote Telnet management session can be inactive before the management software automatically ends it. This feature prevents unauthorized individuals from configuring the switch if you leave your management workstation unattended. This parameter applies to a local management session but not to a remote SNMP or web management session. An SNMP management session remains active as long as the network management application is active. A web browser management session remains active as long as your web browser is open. 5. To change the AT-S84 management login user name, do the following: a. Type N to select Change Administrator User Name. The following prompt is displayed: Enter current password> b. Enter the current login password. The management software prompts you for the password to prevent an unauthorized individual from changing the login name. c. Type the new user name and press Enter. The default name is manager. The name can be from 0 to 12 characters. Spaces are allowed. The login name is case sensitive. Not entering a new login name deletes the current login name without assigning a new one. The new user name appears in the User Field in the top portion of the menu. You must use the new login user name the next time you start a local or web browser management session. 6. To change the manager login password, do the following: a. Type P to select Change Administrator Password. The following prompt is displayed: Enter old password> b. Enter the current manager password and press Enter. The following prompt is displayed: Enter new password> 40 Section I: Using the Menus Interface

41 AT-S84 Management Software User s Guide c. Type the new password and press Enter. The password can be from 0 to 12 characters. Allied Telesyn recommends not using special characters, such as spaces and exclamation points. The password is case sensitive. Not entering a new password deletes the current password without assigning a new one. The following prompt is displayed: Retype new password> d. Retype the new password and press Enter. You must use the new login password the next time you start a local or remote 3management session. Section I: Using the Menus Interface 41

42 Chapter 3: Basic Switch Parameters Disabling or Enabling the Web Server The AT-S84 management software is shipped with web server software. The software is available so that you can remotely manage the switch with a web browser from any management station on your network. (The instructions for managing a switch with a web browser are described in Chapter 16, Starting a Web Browser Management Session on page 199.) The default setting for the web server is enabled, To disable or enable the web server, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page From the Basic Switch Configuration Menu, type U to select User Interface Configuration. The User Interface Configuration Menu is shown in Figure 7 on page From the User Interface Configuration Menu, type W to select Enable/ Disable Web Server. The following prompt is displayed: Enable or Disable Web server (E/D)> 4. Type D to disable the web server or E to enable it. 42 Section I: Using the Menus Interface

43 AT-S84 Management Software User s Guide Disabling or Enabling the Telnet Server This procedure describes how to enable or disable the Telnet server on the switch. The default setting for the Telnet server is enabled, To disable or enable the Telnet server, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page From the Basic Switch Configuration Menu, type I to select User Interface Configuration. The User Interface Configuration Menu is shown in Figure 7 on page From the User Interface Configuration Menu, type L to select Enable/ Disable Telnet Server. The following prompt is displayed: Enable or Disable Telnet server (E/D)> 4. Type D to disable the Telnet server or E to enable it. Section I: Using the Menus Interface 43

44 Chapter 3: Basic Switch Parameters Configuring SNTP The AT-S84 software is shipped with the client version of the Simple Network Time Protocol (SNTP). You can configure AT-S84 to obtain the current time and date from an SNTP or Network Time Protocol (NTP) server located on your network or on the internet. SNTP is a reduced version of the NTP. However, the SNTP client software is interoperable with NTP servers. To configure SNTP, perform the following procedure: 1. From the Main Menu, type B to select Basic Switch Configuration. The Basic Switch Configuration Menu is shown in Figure 4 on page From the Basic Switch Configuration Menu, type T to select Set SNTP Server IP. The SNTP Configuration Menu is shown in Figure 8 AT-9000/24 Local Management System Basic Switch Configuration -> SNTP Configuration Menu Time ( HH:MM:SS ) : 00:19:58 Date ( YYYY/MM/DD) : 2006/01/01 SNTP Server IP : Enabled SNTP Polling Interval : Enabled Time Zone : GMT (+800:Taipei) Daylight Saving : Disabled <COMMAND> Set SNTP Server I[P] Set SNTP [I]nterval S[e]t Daylight Saving Set Time [Z]one [Q]uit to previous menu Command> Figure 8. SNTP Configuration Menu 3. Configure the SNTP server s IP address: a. Type P to select Set SNTP Server IP. 44 Section I: Using the Menus Interface

45 AT-S84 Management Software User s Guide The following prompt is displayed: Enter new IP address> b. Type the IP address for the SNTP server you want to use. 4. To set the SNTP interval: a. Type I to select Set SNTP Interval. The following prompt is displayed: Enter Interval Time> b. Type a number to specify the number of minutes between occurrences of polling the SNTP server. The range is 1 to 60 minutes and the default is 1 minute. 5. To set the time zone: a. Type Z to select Set Time Zone. The Time Zone Configuration Menu is shown in Figure 9. AT-8000/8POE Local Management System Switch Tools Configuration -> Time Zone Configuration Menu Time Zone : (GMT+8:00) Taipei Daylight Saving : Disabled Type Time Zone Nation or City (GMT-12:00) Eniwetok,Kwajalein 2 (GMT-11:00) Midway Islands, Samoa 3 (GMT-10:00) Hawaii 4 (GMT-09:00) Alaska 5 (GMT-08:00) Pacific Time (US & Canada):Tijuana 6 (GMT-07:00) Arizona 7 (GMT-07:00) Mountain time (US & Canada) 8 (GMT-06:00) Central Time (US & Canada) 9 (GMT-06:00) Mexico City, Tegucigalpa 10 (GMT-06:00) Saskatchewan <COMMAND> [N]ext Page [S]et Time Zone [P]revious Page [Q]uit to previous menu Command> Figure 9. Time Zone Configuration Menu Section I: Using the Menus Interface 45

46 Chapter 3: Basic Switch Parameters b. Scroll through the list of time zones until you find one that matches your time zone. c. Type S to choose Set Time Zone. The following message is prompt is displayed: Select time zone> d. Type the number that corresponds to the time zone you want. If you selected a time zone that observes daylight saving time, the following prompt is displayed: Enable or Disable Daylight Saving (E/D)> e. Type D to disable the daylight saving time or E to enable it. Note You must set the time zone in order to display the daylight saving time option. If the time zone you previously selected is located in DST area, you can set this anytime. 46 Section I: Using the Menus Interface

47 AT-S84 Management Software User s Guide Viewing Switch Information To view general information about the switch, perform the following procedure: 1. From the Main Menu, type G to select General Information. The General Information menu is shown in Figure 10. AT-9000/24 Local Management System Main Menu -> General Information System up for : 24min(s), 36sec(s) Runtime Image : Version 1.0 Boot Loader : Version 1.0 Hardware Information Version: DRAM Size: 16MB Fixed Baud Rate: 9600bps Flash Size: 4 MB Administration Information Switch Name: Marketing Switch Location: Fourth Floor Switch Contact: Ralph System Address Information MAC Address: IP Address: Subnet Mask: Gateway: Automatic Network Features DHCP Mode: Disabled 00:06:5H:B2:65:84 Press any key to continue... Figure 10. General Information Menu The General Information Menu displays the following information: System up for The number of hours, minutes, and seconds since the last reset or power cycle. Runtime Image The version of the runtime software. Boot Loader The version of the boot loader software. Section I: Using the Menus Interface 47

48 Chapter 3: Basic Switch Parameters Hardware Information Section Version The hardware version number. Fixed Baud Rate The baud rate of the console port. You cannot change this parameter. DRAM Size The size of the DRAM, in megabytes. Flash Size The size of the flash memory, in megabytes. Administration Information Section Switch Name The name assigned to the switch. To assign the switch a name, refer to Configuring System Administration Information on page 36. Switch Location The location of the switch. To specify the location, refer to Configuring System Administration Information on page 36. Switch Contact The contact person responsible for managing the switch. To specify the name of a contact, refer to Configuring System Administration Information on page 36. System Address Information Section MAC Address The MAC address of the switch. You cannot change this information. System IP Address The IP address of the switch. Refer to Configuring the IP Address, Subnet Mask, and Gateway Address on page 32 to manually assign an IP address or Enabling and Disabling the DHCP Client on page 35 to activate the DHCP client. Subnet Mask The subnet mask for the switch. Refer to Configuring the IP Address, Subnet Mask, and Gateway Address on page 32 to manually assign a subnet mask or Enabling and Disabling the DHCP Client on page 35 to activate the DHCP client. Gateway Default gateway IP address. Refer to Configuring the IP Address, Subnet Mask, and Gateway Address on page 32 to manually assign a gateway address or Enabling and Disabling the DHCP Client on page 35 to activate the DHCP client. 48 Section I: Using the Menus Interface